huawei-cloud-migration-vmware-ecs-private
Warn
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: Utility scripts such as
batch_migrate.py,vpn_check.py, andgenerate_template.pyexecute local shell commands usingsubprocess.runoros.systemwithshell=True. These commands are used for self-daemonization, network connectivity validation, and missing dependency installation. - [DYNAMIC_EXECUTION]: The migration workflow dynamically generates and executes administrative shell scripts on remote servers via SSH connections. Notable examples include
agent_state_check.shfor agent status monitoring andstart_agent.shfor initiating the migration process. - [INDIRECT_PROMPT_INJECTION]: The skill ingests migration task parameters from user-provided Excel files.
- Ingestion points: The
excel_reader.pyscript reads host and proxy configuration from.xlsxfiles. - Boundary markers: While data is structured within the Excel sheets, there are no explicit delimiters or instructions to the AI to ignore potential instructions embedded within text fields.
- Capability inventory: The skill has high-privilege capabilities including executing arbitrary commands via SSH and managing cloud infrastructure through the
hcloudCLI. - Sanitization: The implementation includes regex-based validation for ECS names and task identifiers in
task_name_utils.pyandownership_utils.pyto prevent malicious payloads from reaching cloud APIs. - [EXTERNAL_DOWNLOADS]: The skill retrieves necessary binaries from established external sources, including the GOST proxy tool from its official GitHub repository, the migration agent from the vendor's object storage service, and rsync source code from Samba.org.
- [CREDENTIALS_UNSAFE]: The skill manages Huawei Cloud Access Keys and Secret Keys. It implements a
CredentialManagerthat utilizes an AES-256-GCM encrypted local cache, mandates user confirmation for credential updates, and masks sensitive identifiers in log outputs to prevent exposure.
Audit Metadata